writeups.xyz / $9240 Bounty in 30 days Hunt Challenge

Submitter : c2a

Date: 21 October 2023

Bounty : 9,240

Vulnerabilities :

• Information Disclosure
• Reflected XSS
• Account Takeover
• CORS Misconfiguration
• Web Cache Deception
• Logic Flaw
• CSV Injection
• HTML Injection
• Client-Side Enforcement of Server-Side Security
• 2FA / MFA Bypass
• Broken Access Control
• Privilege Escalation
• Pre-Account Takeover

Programs :

• Undisclosed

Authors :

• 0xrz (@Omidxrz)

Link :
https://blog.voorivex.team/9240-bounty-in-30-days-hunt-challenge